{
 "id": "AIR-2026-0468",
 "slug": "cve-2026-26013-langchain-chatopenai-ssrf-via-image-token-cou",
 "title": "CVE-2026-26013: LangChain ChatOpenAI SSRF via Image Token Counting",
 "summary": "LangChain fetched arbitrary image URLs without validation during vision model token counting, leading to blind SSRF. The impact is limited due to timeouts and lack of response return to attackers.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "LangChain"
 ],
 "incident_date": "2026-02-11",
 "incident_date_precision": "day",
 "first_reported": "2026-02-10",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26013",
   "publisher": "NVD",
   "title": "CVE-2026-26013: LangChain is a framework for building agents and LLM-powered applications.",
   "published_at": "2026-02-10"
  },
  {
   "url": "https://github.com/advisories/GHSA-2g6r-c272-w58r",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-26013: LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages",
   "published_at": "2026-02-11"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-26013",
  "ssrf",
  "langchain"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}